{"as_of":"2026-08-07T23:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e961200285d4092237bf15018ceb47091ece60622ba3309d3c2c1883576c7d14","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":24,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:36:09.746380Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T23:36:22.936259Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":141,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:bce063e3eb2500d2f449f35058aacbd9e4b815c590540f0fd9146eddd0251301","observation_id":"4c818245-27f2-4528-a0c2-76a337aeccac","resolution":{"observed_at":"2026-05-23T04:42:33.779160Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-16T17:08:28.933831Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2504.19793"},"observation_digest":"sha256:93e4d811f8a616ed6b5961a5cbf553cfefc091c4f65542489c5ce02cde986b9b","observation_id":"2a9cecac-da47-40d9-aa64-005a1ff22a92","resolution":{"observed_at":"2026-05-16T17:08:29.020566Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:c756600c3a2d8eda3539babb87eafaf35f333e9243325b53bb4bb0ab673d8065","observation_id":"454aa68a-fc7b-4753-ad8b-702f8ba5fbfc","resolution":{"observed_at":"2026-05-22T19:11:58.012323Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2504.20984","last_updated":"2025-09-10T19:03:48Z","snapshot_observed_at":"2026-08-05T03:19:51.405028Z","submitted_at":"2025-04-29T17:55:52Z","title":"ACE: A Security Architecture for LLM-Integrated App Systems","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-22T18:05:50.363944Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2504.20984"},"observation_digest":"sha256:8417ff3e57560304bfa44ab43f53d125cde78762e7e55ad882c367f361f8d572","observation_id":"4563f920-b373-4c37-897a-d4a746f7db47","resolution":{"observed_at":"2026-05-22T18:06:54.286509Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-07T14:36:09.746380Z","title":"Aligning llms to be robust against prompt injection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:36:09.746380Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2505.18333"},"observation_digest":"sha256:bd7ae4955f73ba11c90c385a957ffae2ecd65c8e0f2c784a07b91ae810cc52ed","observation_id":"92a5095f-584a-4555-8586-88a61d03c25b","resolution":{"observed_at":"2026-08-07T14:36:09.746380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-07T11:59:22.064371Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.064371Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e86e27e4f6fb0344f203780e4f785424ec9fe3c4b580689779acd39d9a12177f","observation_id":"09fdaad2-4160-442b-b84e-2d0dc3a1298b","resolution":{"observed_at":"2026-08-07T11:59:22.064371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-06T18:32:38.828080Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.828080Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:383501f64618613c9c8684e82d47a941f92b5df54f5ed7a106b895970bad92cb","observation_id":"6ede77e6-208c-4571-8ddc-ee3fe5407b0c","resolution":{"observed_at":"2026-08-06T18:32:38.828080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2507.10610","last_updated":"2026-04-07T11:46:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-13T08:36:09Z","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T04:10:57.882345Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2507.10610"},"observation_digest":"sha256:347874606e863924ccac44ad47c0dfa509ff8b91c811b5a7ac77fbed80ae5984","observation_id":"b79bbf34-94e8-487c-bfad-835511aa37cf","resolution":{"observed_at":"2026-05-19T04:12:02.170806Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-05T10:44:10.399166Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-07T22:51:24.319569Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.399166Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:947496cffc973362b611a183fb929062350c317dd9dfc4166137ba3eb3816515","observation_id":"16634dc5-cecf-4163-a0d7-286a5723c790","resolution":{"observed_at":"2026-08-05T10:44:10.399166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-04T21:33:57.102424Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-06T22:34:55.594338Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T21:33:57.102424Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:a854bbe1fc2302f5a08e8a0bb76638d71109114d7fe93242d378ce39c1b04c84","observation_id":"555e7fec-8fa6-4ac4-badd-e5a12015c9d3","resolution":{"observed_at":"2026-08-04T21:33:57.102424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-04T08:06:09.522680Z","title":"Secalign: Defending against prompt injection with preference optimization.arXiv preprint arXiv:2410.05451, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.22963","last_updated":"2026-06-19T20:25:06Z","snapshot_observed_at":"2026-08-04T08:06:05.944327Z","submitted_at":"2025-10-27T03:37:41Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T08:06:09.522680Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2510.22963"},"observation_digest":"sha256:e481673c941343ae3c4c5f0db0444b75c03ddfd40b4ba18c87753a93b30fc39b","observation_id":"5c262896-4410-4d02-9c69-4315c92d971e","resolution":{"observed_at":"2026-08-04T08:06:09.522680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":180,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:ca53e9f643bf0905cfdb142a9d883a9b0bba66158a825ac9cdebbf4130bf1fdc","observation_id":"dcc30560-0954-4523-9158-2be89eac7dd3","resolution":{"observed_at":"2026-05-18T03:42:21.914241Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2512.00520","last_updated":"2026-04-27T13:00:45Z","snapshot_observed_at":"2026-08-06T05:22:56.702843Z","submitted_at":"2025-11-29T15:31:16Z","title":"Toward a Safe Internet of Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-17T03:16:40.622915Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2512.00520"},"observation_digest":"sha256:95b6dd97e03c7822f6a08850f44be69159291977635382bdc0ea23b619f553e5","observation_id":"35d43ed6-4797-4df0-b6b8-c14e88ab66be","resolution":{"observed_at":"2026-05-17T03:18:56.885802Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-13T12:52:49.101462Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.03598","last_updated":"2026-04-04T05:49:30Z","snapshot_observed_at":"2026-07-13T12:52:48.858079Z","submitted_at":"2026-04-04T05:49:30Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-13T12:52:49.101462Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2604.03598"},"observation_digest":"sha256:2470a42dacba32a74483e6f780162b8fd65c4dc73d52dc64d382d7307809d97d","observation_id":"566d8f0b-9332-4c18-8dac-7c8b7a4f5eaa","resolution":{"observed_at":"2026-07-13T12:52:49.101462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2604.12817","last_updated":"2026-04-14T14:43:55Z","snapshot_observed_at":"2026-07-06T23:00:56.449281Z","submitted_at":"2026-04-14T14:43:55Z","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T15:54:59.122635Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2604.12817"},"observation_digest":"sha256:0f5a8aa9374c9b0d6166aa3313dc53a8c8c45ff9d89220890a3f0a688e324c43","observation_id":"bfa1f9af-83a5-4e2b-a4c6-6d8c334b1dd6","resolution":{"observed_at":"2026-05-11T09:36:10.585625Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:e5f4b70564e4c4a20095d321f4019a3858ecdb4165526392b6ca790a78304c65","observation_id":"377c23ef-e515-45a9-9e0c-cbc3f560a1f6","resolution":{"observed_at":"2026-05-11T23:46:17.200381Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2605.01078","last_updated":"2026-05-01T20:22:40Z","snapshot_observed_at":"2026-07-06T23:14:24.758147Z","submitted_at":"2026-05-01T20:22:40Z","title":"A Sentence Relation-Based Approach to Sanitizing Malicious Instructions","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-09T18:40:16.916424Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2605.01078"},"observation_digest":"sha256:f9afbc0672080722b5c2d3c4607b1b025faf9aa508f2a9a26159f8a814bb0e31","observation_id":"af047c79-62ae-43c9-ba05-b18cbbb12463","resolution":{"observed_at":"2026-05-11T16:06:43.365091Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2605.11868","last_updated":"2026-05-12T09:48:53Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:48:53Z","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-13T05:46:07.132408Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2605.11868"},"observation_digest":"sha256:57fa01df699842738b7eb412846014f5bd3e20692b7c46f8d5d1d5eb47a11e4f","observation_id":"2d6c8c29-bc32-4478-96af-0c0e02594d39","resolution":{"observed_at":"2026-05-13T05:47:21.337632Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2605.14290","last_updated":"2026-05-14T02:48:57Z","snapshot_observed_at":"2026-08-03T04:50:16.568616Z","submitted_at":"2026-05-14T02:48:57Z","title":"Web Agents Should Adopt the Plan-Then-Execute Paradigm","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-15T02:42:05.644536Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2605.14290"},"observation_digest":"sha256:29cc63966329dd3e6dfe3b8014f849bbfb042250ad94b4f88bfbac3afb212ace","observation_id":"90beb3a0-1e9f-4bf0-bfe7-3894b5c18d73","resolution":{"observed_at":"2026-05-15T02:43:33.387927Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2606.02668","last_updated":"2026-06-01T11:08:17Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-06-01T11:08:17Z","title":"What You Approve Is What Executes: Consent Integrity for Black-Box LLM Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-28T14:12:38.815852Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2606.02668"},"observation_digest":"sha256:6b0913273757ff43c0ff2e457cb1ab0b6b818565fda1f8b87cbd420af5d3f6f8","observation_id":"23b62fb7-766d-4375-b67c-6e2f96052aec","resolution":{"observed_at":"2026-07-01T23:36:22.938900Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2606.28739","last_updated":"2026-06-27T05:26:43Z","snapshot_observed_at":"2026-08-05T17:30:24.601737Z","submitted_at":"2026-06-27T05:26:43Z","title":"Agent Safety Is Action Alignment","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-30T09:50:45.759936Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2606.28739"},"observation_digest":"sha256:dc352b46bf86e72eca4dd8443bc6bbe0279c1897b58973332c4a11953cbee165","observation_id":"b0e91c8f-a793-4727-826e-d19e4a2f315b","resolution":{"observed_at":"2026-06-30T09:54:34.990454Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2606.30383","last_updated":"2026-06-29T14:39:38Z","snapshot_observed_at":"2026-08-04T03:27:44.496352Z","submitted_at":"2026-06-29T14:39:38Z","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-30T05:48:15.990443Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2606.30383"},"observation_digest":"sha256:0a94448e41248433f09f9d799d3c01fd20768e10ac24d3aa0166b350d212a701","observation_id":"99b5583a-a398-4e35-9086-452c7455a7c7","resolution":{"observed_at":"2026-06-30T13:44:41.472646Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-02T11:28:37.338330Z","title":"SecAlign: Defending against prompt injection with preference opti- mization, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.338330Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:5d26726aac4f64dc0d170fcafb6671c8f9f66c3250fd64b2be2e351093fcda6d","observation_id":"17fc53ab-c396-4b37-a67a-11cde6e242d2","resolution":{"observed_at":"2026-08-02T11:28:37.338330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-31T23:24:19.513672Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23999","last_updated":"2026-07-28T07:27:46Z","snapshot_observed_at":"2026-08-03T08:43:31.893929Z","submitted_at":"2026-07-27T04:51:20Z","title":"ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-31T23:24:19.513672Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2607.23999"},"observation_digest":"sha256:d083b47c4530c52d827f946f4dfc06c24d4c9e84cb132947d224ed1f0798c61c","observation_id":"7e004625-42f8-46f4-ada6-d0988f2534ca","resolution":{"observed_at":"2026-07-31T23:24:19.513672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.05451/citation-record","integrity":"/paper/2410.05451/integrity","json":"/paper/2410.05451/citation-record.json","paper":"/paper/2410.05451"},"outbound":[],"paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 24 inbound Pith citation observations for arXiv:2410.05451."}